Hi Greg,
You're welcome.
This disabled the use of programs that serve as extensions to IE
functionality, like the Google Toolbar. Unfortunately lots of spyware
use this feature to wreak havoc, as you have seen!
Having disabled the program, now you need to get rid of it. You need
to perform a scan using ad-aware and spybot. Consider the use of
CWShredder and the other programs, all free, to completely clean your
machine of malware.
Furthermore, a virus scan using the latest definitions would be good,
and the use of a firewall, either XP's own or a third-party one, like
Zone Alarm, free at
www.zonealarm.com
More info about parasites:
http://www.aumha.org/a/parasite.htm
Try downloading, installing and updating the
spyware removers from the links below. Run both of them.
Ad-aware
http://www.lavasoftusa.com/support/download/
Spybot S&D
http://www.safer-networking.org/index.php?lang=en&page=download
Download the utility CWshredder:
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Unzip - close *all* instances of IE & OE, hit the executable and
follow the prompts.
You can also download Hijack This from here:
http://www.mjc1.com/files/merijn/hijackthis.exe
Go here:
http://mjc1.com/mirror/hjt/
For instructions on how to use it; you have to post the log it
produces here:
http://www.spywareinfo.com/forums/
so experts tell you what is good and what is malware
HijackThis Log Tutorial
http://www.aumha.org/a/hjttutor.php
HiJack This is a program that simply searches for programs that run
at boot time, and checks for browser plug-ins. The results this
program gives you are generally just informative. Most of the
programs it will come up with are valid programs that you actually
want running. You'll have to go through the results and tell the
program to delete unwanted programs. If you can't figure out what
some of the programs are, don't just delete them, research them
and/or post them so experts can let you know what the program does.
Just type the program name into google which gets
a decent answer pretty quickly.
If these don't correct the problem, then get yourself a copy of
BHODemon, available at
http://www.definitivesolutions.com/bhodemon.htm .
It does not need installing - simply unzip and run the EXE program.
It is easy to use. It will find the hijackware DLL files, and
give you the ability to disable them.
Hope this helps.